CISSP Practice Questions (601–620)

Answer: B

Rationale: ACLs inspect packet headers (source, destination, protocol) to permit or deny traffic, similar to packet filtering firewalls.

Answer: B

Rationale: Corrective controls restore systems post-incident, while recovery controls ensure service continuity and data restoration.

Answer: D

Rationale: SOC 3 reports are designed for public distribution and provide high-level assurance about security controls without exposing sensitive details. SOC 1 and SOC 2 reports require restricted distribution.

Answer: C

Rationale: Federated identity relies on mutual trust relationships to enable authentication and authorization across organizational boundaries.

Answer: D

Rationale: Accurate asset inventory requires centralized system configuration management, network discovery, and license management tools to track hardware and software consistently across the organization.

Answer: D

Rationale: A defined escalation process ensures timely incident communication and resolution between vendors and internal teams.

Answer: A

Rationale: Full interruption testing involves halting normal operations to validate all recovery procedures — the most thorough BC test type.

Answer: B

Rationale: Network Access Control (NAC) validates device compliance (such as antivirus, patch level, and OS version) before allowing network access, ensuring endpoints meet security standards.

Answer: C

Rationale: Under ISO 27001’s PDCA cycle, corrective actions to resolve audit nonconformities occur during the Improvement stage, where issues identified during assessment are addressed and remediated.

Answer: D

Rationale: Input validation is the primary defense against common web application attacks such as SQL injection and cross-site scripting (XSS). Transport layer security is important but secondary to application-level security controls.

Answer: D

Rationale: Adding new data repositories changes the attack surface, requiring threat models to be updated to account for new assets and vulnerabilities.

Answer: C

Rationale: SOC 2 Type 2 evaluates both the design and operating effectiveness of security controls over time, providing long-term assurance.

Answer: A

Rationale: Regular enforced PIN changes and CDR monitoring prevent misuse, ensuring accountability and system security in VoIP environments.

Answer: A

Rationale: The Authentication Header (AH) in IPsec ensures integrity and origin authentication, providing non-repudiation of the sender.

Answer: B

Rationale: Processing Integrity ensures that systems perform authorized functions accurately and completely, aligning with intended system objectives.

Answer: A

Rationale: Including security requirements in the RFP phase ensures vendors address controls early, reducing risk in later stages.

Answer: C

Rationale: Network firewalls monitor and filter traffic between systems; host-based firewalls protect the local system by filtering inbound and outbound traffic specific to that host.

Answer: D

Rationale: MFA and biometrics provide layered protection, securing sensitive data on mobile devices even if they are lost or stolen.

Answer: B

Rationale: Strong access controls ensure only authorized third-party users can access critical assets, reducing risks of misuse or compromise.

Answer: D

Rationale: GDPR mandates strict data breach notification requirements and establishes penalties for mishandling personal data.